105912c9995a1d718c5442349d2cc4bb99426f75ff34554cdfd9a7272eeca398

Analysis

max time kernel
144s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15-09-2024 07:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LB3.exe
Size

146KB
MD5

a5f2eeb4c5cbb2c2ff3b103e304c4a37
SHA1

604025da6efc564ae2b3b92c33eb3a2995ca81a4
SHA256

105912c9995a1d718c5442349d2cc4bb99426f75ff34554cdfd9a7272eeca398
SHA512

96e766e4f3aefacada98a5336320db9d26c5d7d5d150125183e5415786b57d46b3383880910cfbdcd0928960d4abcaeba19c0854b0fb4a863391f0b13617bf4e
SSDEEP

1536:NzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDrZ5bKzpnSPyZxedH4UnFgDXv0R:eqJogYkcSNm9V7DmSPNHnFsvCT

Score

10^/10

defense_evasion discovery ransomware spyware stealer

Malware Config

Extracted

Path

C:\RCl10Ol9q.README.txt

Ransom Note

~~~ LockBit Black Ransomware Since 2024~~~ >>>> Your data are stolen and encrypted Price = 2000 $ Bitcoin = 328N9mKT6xFe6uTvtpxeKSymgWCbbTGbK2 Email = [email protected] Email = [email protected] >>>> What guarantees that we will not deceive you? We are not a politically motivated group and we do not need anything other than your money. If you pay, we will provide you the programs for decryption and we will delete your data. Life is too short to be sad. Be not sad, money, it is only paper. If we do not give you decrypters, or we do not delete your data after payment, then nobody will pay us in the future. Therefore to us our reputation is very important. We attack the companies worldwide and there is no dissatisfied victim after payment. >>>> Your personal DECRYPTION ID: WERTYFG34A48MK4D6D525F3F372263313 + ID Number.README.txt >>>> Warning! Do not DELETE or MODIFY any files, it can lead to recovery problems! >>>> Warning! If you do not pay the ransom we will attack your company repeatedly again!

Emails

[email protected]

Wallets

328N9mKT6xFe6uTvtpxeKSymgWCbbTGbK2

Signatures

Renames multiple (11144) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\International\Geo\Nation	2D84.tmp

Deletes itself 1 IoCs

pid	Process
2380	2D84.tmp

Executes dropped EXE 1 IoCs

pid	Process
2380	2D84.tmp

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-2718105630-359604950-2820636825-1000\desktop.ini	LB3.exe
File opened for modification	C:\$Recycle.Bin\S-1-5-21-2718105630-359604950-2820636825-1000\desktop.ini	LB3.exe

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004

Drops file in System32 directory 4 IoCs

description	ioc	Process
File created	C:\Windows\system32\spool\PRINTERS\00002.SPL	splwow64.exe
File created	C:\Windows\system32\spool\PRINTERS\PPfp4yvwg7zxjwkz26a06x7kfab.TMP	printfilterpipelinesvc.exe
File created	C:\Windows\system32\spool\PRINTERS\PPiaedidu222mmb49gtm1ogufuc.TMP	printfilterpipelinesvc.exe
File created	C:\Windows\system32\spool\PRINTERS\PPm91miiy_3wrkz48say28od9zb.TMP	printfilterpipelinesvc.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\RCl10Ol9q.bmp"	LB3.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\RCl10Ol9q.bmp"	LB3.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2380	2D84.tmp

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\da-dk\ui-strings.js	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-36_altform-unplated_contrast-black.png	LB3.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo	LB3.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\PesterState.ps1.RCl10Ol9q	LB3.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\RCl10Ol9q.README.txt	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-40.png	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-125_contrast-black.png	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSVCP140_APP.DLL	LB3.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\logging.properties	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\PlayStore_icon.svg	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINDATAPROVIDER.DLL	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\upsell-2x.png	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.513.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-40_altform-unplated.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\PresentationCore.resources.dll	LB3.exe
File created	C:\Program Files\Internet Explorer\en-US\RCl10Ol9q.README.txt	LB3.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\TestDrive.ps1	LB3.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_altform-unplated_contrast-black.png	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.scale-125_contrast-black.png	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\zh-cn\ui-strings.js.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptySearch-Dark.scale-100.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\UIAutomationProvider.resources.dll	LB3.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\XboxApp.UI\Resources\Images\RCl10Ol9q.README.txt	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\System.Windows.Forms.Design.resources.dll	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\AppxSignature.p7x	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_TileLargeSquare.scale-200.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\PresentationFramework.resources.dll.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\it-it\ui-strings.js	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ro-ro\ui-strings.js	LB3.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-80.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.Cryptography.Cng.dll.RCl10Ol9q	LB3.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\gui\RCl10Ol9q.README.txt	LB3.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\ClientLangPack_eula.txt.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\cs-cz\ui-strings.js	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\eu-es\ui-strings.js.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\_Resources\0.rsrc	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxSignature.p7x	LB3.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\[email protected]	LB3.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\ACEINTL.DLL.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-oob.xrm-ms	LB3.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\local_policy.jar.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN105.XML.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll	LB3.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui.xml	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-black\LargeTile.scale-125.png	LB3.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\UIAutomationClientSideProviders.resources.dll	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_zh_tw_135x40.svg.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\shellext.dll.mui	LB3.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\Close.png.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.scale-150.png	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\LibrarySquare150x150Logo.scale-100_contrast-black.png	LB3.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms	LB3.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\security\blacklist.RCl10Ol9q	LB3.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosLogoExtensions.targetsize-129.png	LB3.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LB3.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2D84.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Modifies Control Panel 2 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\Desktop\WallpaperStyle = "10"	LB3.exe
Key created	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\Desktop	LB3.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe
2292	LB3.exe

Suspicious behavior: RenamesItself 26 IoCs

pid	Process
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp
2380	2D84.tmp

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeAssignPrimaryTokenPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeDebugPrivilege	2292	LB3.exe
Token: 36	2292	LB3.exe
Token: SeImpersonatePrivilege	2292	LB3.exe
Token: SeIncBasePriorityPrivilege	2292	LB3.exe
Token: SeIncreaseQuotaPrivilege	2292	LB3.exe
Token: 33	2292	LB3.exe
Token: SeManageVolumePrivilege	2292	LB3.exe
Token: SeProfSingleProcessPrivilege	2292	LB3.exe
Token: SeRestorePrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSystemProfilePrivilege	2292	LB3.exe
Token: SeTakeOwnershipPrivilege	2292	LB3.exe
Token: SeShutdownPrivilege	2292	LB3.exe
Token: SeDebugPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeBackupPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe
Token: SeSecurityPrivilege	2292	LB3.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 3708	2292	LB3.exe	97
PID 2292 wrote to memory of 3708	2292	LB3.exe	97
PID 1616 wrote to memory of 2828	1616	printfilterpipelinesvc.exe	100
PID 1616 wrote to memory of 2828	1616	printfilterpipelinesvc.exe	100
PID 2292 wrote to memory of 2380	2292	LB3.exe	101
PID 2292 wrote to memory of 2380	2292	LB3.exe	101
PID 2292 wrote to memory of 2380	2292	LB3.exe	101
PID 2292 wrote to memory of 2380	2292	LB3.exe	101
PID 2380 wrote to memory of 4792	2380	2D84.tmp	102
PID 2380 wrote to memory of 4792	2380	2D84.tmp	102
PID 2380 wrote to memory of 4792	2380	2D84.tmp	102

C:\Users\Admin\AppData\Local\Temp\LB3.exe
"C:\Users\Admin\AppData\Local\Temp\LB3.exe"
1⤵
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Windows\splwow64.exe
  C:\Windows\splwow64.exe 12288
  2⤵
  - Drops file in System32 directory
  PID:3708
- C:\ProgramData\2D84.tmp
  "C:\ProgramData\2D84.tmp"
  2⤵
  - Checks computer location settings
  - Deletes itself
  - Executes dropped EXE
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: RenamesItself
  - Suspicious use of WriteProcessMemory
  PID:2380
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\2D84.tmp >> NUL
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4792

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
PID:2984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:4872

C:\Windows\system32\printfilterpipelinesvc.exe
C:\Windows\system32\printfilterpipelinesvc.exe -Embedding
1⤵
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
PID:1616
- C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE
  /insertdoc "C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\{B5D3CF7E-2F54-424F-AD95-7636BDC23230}.xps" 133708585720360000
  2⤵
  PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2718105630-359604950-2820636825-1000\FFFFFFFFFFF

Filesize
129B

MD5
19987bfccc0b86b8e93870abf492b36a

SHA1
392c1c20e609857f3d3966264f9b8b77bb50b82d

SHA256
44cfcbeff6db719ceb309f04f1dc89550948d9ca658937d558935d3d3de55dfa

SHA512
eaadf1c96d404fe6db70373cd6204179c8b5c9c2e44559819dd89cf5595bfc1aeb842ff0ca4eeef1c2711e97231eef9557b10908fa7dbd171e4b61de597a46fd

Download Submit
C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui

Filesize
56KB

MD5
845122e826c0ae559af69ed60767aadf

SHA1
577923ce6c0c36743a0b1c492885583a09f9012f

SHA256
4232d7a91cbbcc493f52f9f08209d99e01260644efedef71d5fe8d57b0417b7a

SHA512
51e06b4d50bcbed2414813b9c8214bbbd753574ddcbb68883369005a4ecf189ea91b9a2ac4b0375f1f7a8f5cad63bbd69c177d00e265208ebdd61a06aea65125

Download Submit
C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui

Filesize
47KB

MD5
2e6b192463f4a6599af56a7db36b32bd

SHA1
a31b773b9a7872f2e76d1abcb05a627e3ffad763

SHA256
8a4067cc7ea5552b2f5a0bf54296d7cc7ff3ab68df142098741db39de372c1f8

SHA512
9e1fc9ac1cf4d909af32c6018dacc5a3ee3845ee2358d4479a158d8e19832ff9df83663a52226bb4a658c75fdb0dc77667e2d13939485c17a8b08cadb9b49820

Download Submit
C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui

Filesize
47KB

MD5
b5f1b89ecb44e8c2108f87af8733a35a

SHA1
85567e4528c213365fb204b4f4b48a7e48c5cc10

SHA256
198c86ca258c1ba9a5eeb9aedf6bf933df8369dcb0daad5d95c3f00c81900ae8

SHA512
27b52a561792b68ee9178eab3a7b47d970d90dda24a9e30c01986730a77b0a70736e57fb1e5448d0638c86538984c27dc79c364cbc239d73559a408e581a8063

Download Submit
C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui

Filesize
43KB

MD5
4664a4b8f34e5d308ae8cf9c558abab1

SHA1
aa12b0834d7b59eaba9e145639607eac3243e711

SHA256
ab081cd0311f095635f4d6a7294c0c8263e0b7b142ee904ac20c16e8b02d472a

SHA512
5a8ab3688023054da75e8bb8153259de772c60d263d936d45827fc6419af61338ac5a6b3b3593a5761dbc0a3113c271e0c02af8ce4498f803441361a2df2ae68

Download Submit
C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui

Filesize
53KB

MD5
77c1d759515e03617eef1e3293f59d7f

SHA1
a3aa8e2ad0c43284050214b6ef8af13e02dfaeb2

SHA256
501f4f96b6d899d831ea7a28d0fe93863a50ab1f408634a76427ce2f22a8da6c

SHA512
058c35d50cec2e41b350dadbafdb9531bff5727052cfe1d93481a606743e40775239bd22016809a90370ecb05ca0ea5f41c189db48c6487ad5a0aadab46ea4fd

Download Submit
C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui

Filesize
47KB

MD5
bbf7fd85dc5ab2b13ce0668f47ab71aa

SHA1
14bed70dee43fea3125a23822134578427f5f233

SHA256
5d740aaa5a62d9346f828305962210403ff7b7de18cdc28e3c1a8b1d2b6dcf9a

SHA512
3a9f9b585421ac8836729b194012cb3a527f5846da6de9ef027f2aabdd69985416322fdd0b7d6c3e754b8dc8dc023b8ccd4e2c5ad48b85fca735c77530c4852b

Download Submit
C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui

Filesize
57KB

MD5
ee30f54bae9a679c05e1570e9d369008

SHA1
7f84d50e4bc71095d80e2d3c261c9a554abc0881

SHA256
d61c16384a2f396e5c276229d01f7fc0f1299a7d3882870a06c4f5909ff60fbb

SHA512
9c403ef8bb27d049815c8a9c5fc7ef1c061acbb832fe3666df1c32c97c9c6effe750e875c01ec8c5aafae5e728a4a22f2f70cfe31495a532c34732e6839e272e

Download Submit
C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui

Filesize
47KB

MD5
e5253624c3a4cfa28455b5835571aac9

SHA1
8cdb217bc6feef872696f9744b1ea9a683f883b2

SHA256
087f87d741414b672e1b25051496c2066d28dcb92a9f950b67e60b2d36c4b21e

SHA512
8aa66ab049b49a4595b2630b012026a7f498831e422b192c652013aed243b2e45b68eca1dd313a42b99ca6a190f066ea8ae945baef1cf0e8c36c64bb2f265848

Download Submit
C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui

Filesize
54KB

MD5
c0df3b1f2ff28a1c4bd36a71c73bdaae

SHA1
b67c5292a5ebdcb0c6ac47c013723734765bb3f4

SHA256
c3bad288f769b625bc9994bd88caec06241ee34ece18740d46714768ecd26d0f

SHA512
56885e5298ec0991924408aa0082d75f6e7306e92169a4dee1e4c52618b4abf99000101bd60202577c5d57c18117415ba0f2525ee12c901c0ea6f50f45920fdc

Download Submit
C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui

Filesize
47KB

MD5
ace1c3c977630a845f1ed8a86d6c1f92

SHA1
d382553358fb67fc76282e608b15cfa314713b08

SHA256
7fad876876b3778a28ed1ca850a7d710c1ad486602b11dad5bf1fe3c98fec2fb

SHA512
dff96f64a51ba485c4d19c7b4bbc0fd074d7fe0cadb5230f6e6a114313d1d0bb6a66a37bca3af7cae8447c72e275c19420e6c8b3245b0ee8c03bbe05f789f387

Download Submit
C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui

Filesize
32KB

MD5
56fee7698e07e2307867152559937ee2

SHA1
bd1ade82ed8d058ae1853f7b1f2e02be8a2db87e

SHA256
87ba931add8a0b41d47967b0ef4ecc89fa6d5f3cb62ded201879d643df4d6948

SHA512
2ed5a08e83cbff2f98dc36e29a1225c5050fbce1148d2b5ad1dca8422a8a5e960e399d0ad7902620083579034809fa0f2392874ed922801f088bc3a28322a5ed

Download Submit
C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui

Filesize
37KB

MD5
c4aa55f506275c43799cb93f65b047ea

SHA1
0ea7e95f8f31ed2df4d8347ec92d5e1ccdc300c6

SHA256
af1c9532f4a3700467d31574dcb345edf1913e3227202d6240086f2b05571bcf

SHA512
ae20079c310d43717ffef0964cc4e9688d903d0df31ae7a8ed96992f66b1203d152a358f08c96657f84f72091a6fdc038d5760aeeb74d6729e51b5780771e4d2

Download Submit
C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui

Filesize
20KB

MD5
772188eba7675401b66f5e9895a05c55

SHA1
6b56c99b263574c6660e67b39c36b7f2849011cc

SHA256
938da99d00c750b3655fad7471e7f385029c67a44a6a1ac086d603f10babd3f7

SHA512
0ec12025af441e6113a672d084b11050a21b49c4c44fb46f86db0020299b03ba14b3046937cfb3fcf71d2eba475882fd92ab899fe19d95390b9aa1262d31654d

Download Submit
C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui

Filesize
17KB

MD5
c2c2d8a7569d7479c8a430528f6ea8a1

SHA1
0b63d93ea60bd62e246b7cddf1bfbbbd9a44fece

SHA256
29f9c61d96c0f2ce3fa32994fa94371367c17118504e92580b04a160603470fe

SHA512
ca0d1de8974ff87ba3e88a5f4c8c2d38150c35ecb5a4ee62178c01b57f37eee41bfa6b96ff919256a48db4f88dfcbba20b8bcc2d90c2ffafa3c95013dd6e44a2

Download Submit
C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui

Filesize
19KB

MD5
b820f8900f1c0ea7c4939b85178d24b9

SHA1
a43027d11b6f5524a8d7bbba6e59571ee404a291

SHA256
6be49060a8bd89b0bc5635b10df41f65682c9038a56e338c8da8f79774515276

SHA512
b6a78ebbb3e3a575afcea0334e6aa9453312805975f98428cfe954645d35bc4c934c86020ceeb712addb059b6148e8f901b34a9f02c09d638d6c86f16b406359

Download Submit
C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui

Filesize
20KB

MD5
ed22e6f472abe5bd7aa3738985bb5e3e

SHA1
faeeba42900d3ae408c2620890dc3ef547ed86cc

SHA256
4b5ebdc254d38391a798d27e018b8e5d391e76da6bbe1cafd333ca6a7af57998

SHA512
05ad94ab18e4624ae58cc30a7a39482b84de7e2cc0aaa98e9f872176c665095a6e9f71969e005ff9243c9077d05a371feb58fd21a004f08ec75c3aaf7d516428

Download Submit
C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui

Filesize
19KB

MD5
cbe42c2128e655ce30229af09b8128d4

SHA1
8fd843cf54dd2c62370ec69fca35a06a7527ba46

SHA256
0b7d960427229fbfc2cff661fcd6b8728440ab85e3f7b13f4887a4a35dd6d844

SHA512
a8bf46a01382d0e7a6bab8f24f0329ad67ea23db9fec86ba4ed43570d64fcb301babe2dcf577f6ddc1e2882a914ef91d1f05bceb2973495d00fd286df93ca01a

Download Submit
C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui

Filesize
11KB

MD5
d67fe484a05c425a6c397a834ce77bc0

SHA1
93ad620c07dc4d38940e29629854b80d1f8d1f73

SHA256
66bf50ea702414d63acabe7e195973aefc1419bed9ceec4513684930ecb10f4e

SHA512
166e62dc65f7ed38c16db8a703ba11638fdb8746a58ea8ff7ada442d0ba9c6533229e6b374b59760e7e8dcfb48d1f0341dd979bd73f1a9ca2f0d44aa46e51251

Download Submit
C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui

Filesize
102KB

MD5
9921b96eecc0d293f6b6a7fdf75c28a5

SHA1
e5c8fb87d5ecdf371fb466247ce63928d9e393c8

SHA256
4dca560ba1ae575a0d5fe587bd734880ef6e87d3b5ab83dfe76abd3fcea657ee

SHA512
e28bcc48018fa2529c0c84cfacae489608686eeea018593b649aa0ca91c3677f22b0d25ef539b147ecc82892a9b48c9fdf90ddb39976f061fb7f166616dc402c

Download Submit
C:\Program Files\Common Files\System\en-US\wab32res.dll.mui

Filesize
92KB

MD5
d6dcfd83d3334a464a0ccf4637487f0a

SHA1
6400c6cbbba252187b8ee6737ed1693996ac168a

SHA256
2843ce4091c7e0d93aee3c609bfffd7462fe0494730f47a3f49492cbc09f34c0

SHA512
d31c5f53b07b1c886828509f2a526fd7112f5ff3c5b59f091e830190801f1e2e6f916f55f65d04bdb61028383a319b60ae89dba903435299bb3a0e706efe12d3

Download Submit
C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui

Filesize
102KB

MD5
55e9251ec9a1c3b654ce37cd544c607a

SHA1
3592b456bfa1d18180d1f04a789fa865d700e093

SHA256
08de5cb5326d5480634ccb46739fed64f6f44df849d4ea2bc9284004a67b436f

SHA512
5e946f1f4f21fe58e0bef5db44d719b1ad82786795c31272032127dd2cea898f9490944b3f80a183df4a2c695b5488058f0b349cc3bd5b16b8f836f085dbe37d

Download Submit
C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui

Filesize
104KB

MD5
6258b163ea6ea2405688b53b97100bda

SHA1
02d61630411400725112cc1e32fe71674753cdb4

SHA256
090f2c180b8f1dc7e0fdd7e47f7c8e4395e96a939527b4efad6c690cdef79a17

SHA512
0a8e99d8d5b72774aadeb957f71f5845683377689dac5eb057685b9b38e894c087cf026eff9ca48f5d1819499e04a8b11841c921351de7b7c9c2f190ef76af1f

Download Submit
C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui

Filesize
97KB

MD5
f896a85fb5cd7e114fdb8b35dfddc616

SHA1
5d5a8b9ceb9e02dbe6c5575702290b48cef20942

SHA256
381bf78ce60daab949fa40bab502f0a0c4b4ebe180e8269a4903c0208af7137d

SHA512
207ae90b3d2bc8edd61e774473fd064e28e89871209d6cdb0f307102e11594b9b5f58036789e2b65528615d44a52420a25336e01cf6565ad11bfb0e32f487498

Download Submit
C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui

Filesize
69KB

MD5
8d3cf7666d9aeb06435df113d269ab64

SHA1
8b667a0d3f764ddd6c5f1b4a7550c4d9d83fc833

SHA256
bfa4f69f1dd88bf74a822bf00bedfb99fef2d997f268447ae50a3caf4f358852

SHA512
c9ce3059ec1ef6a693fb30fd5e259d7babfa90b276996d074e433b1ecdef863ef28910fc73fe4d43af4ac1af965a1d130cc206274039fd4c76e86ffb5c77dfdd

Download Submit
C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui

Filesize
12KB

MD5
c5a9b6a344e353f58d19b17e15a03ea9

SHA1
cb23d285314e226ff683fd2318c8d5a0052bae1b

SHA256
bc5242d7dda17da81fa28bf6511bbe19b1a989316079614efbdfb842b1e513c2

SHA512
d2aee17209e6bb17ceef45c941f77246d622113f207708ec50b37e4590323426f633ee37efc8f0abca69f489153e3d9822126f8f3fde5c46bd174171250f1862

Download Submit
C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui

Filesize
9KB

MD5
991b188c016e188dceec4dc70a0c5708

SHA1
412b5c7eb2575396c2154d6e345dc0502bd60dd1

SHA256
d8baa240278613ff4b8c5feb92a1209ec94efa7809384ff448ab198bdd8c8574

SHA512
636acca91e8a5efdf31a6b3732c92e2738c6ea40ac5e2305a8cb50d727b3e8741fc77a0d25f4f5557df795c5c23f3622e26d5f6fe3c726ae01e536641ac66968

Download Submit
C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui

Filesize
10KB

MD5
3c78f3a29ff22f00be7547db1a716d08

SHA1
78706f35c62b438990323b7ed685fd8f4dc51fcd

SHA256
d6856a3f27451d064a2fe736a14b978241fa818c7027e91a9be2e03ebf0893ad

SHA512
f0367dfe91b0533657279f3d01ae077c4410ed5045904d7a2dadebac8a1a74e5e1ed8dbd6cea68ab74fd393cc760c2409322d63e3ee17470853293e098a0ba8b

Download Submit
C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui

Filesize
7KB

MD5
77407a4f350fa3aa8a0ad27be490b19d

SHA1
3a1320084898af76f990d21366c9f4e2ec8cc3a2

SHA256
40777113e964ce3f629a3e1826d48019f31594b701ac0fa1dc3597882dbfbd0d

SHA512
98cfeb3f125f7aaeb94ce40be983706bbf29bf334280d333a6b6f09cc46604e5f4fde571689773fe951c6468115de29401d03afe50bbc6f8e5bca36ca6f68fd7

Download Submit
C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui

Filesize
11KB

MD5
bb5736734ad8e446398ecef6b7d88fd5

SHA1
8b539c323830acc16366e8161e41210690189dea

SHA256
ba62627061ededf04f7793eff14d4563983aecb63a799a385e31d829fd9a70f9

SHA512
6e8b9dda330020c98ab074cfa157afd21a376e812b8a5b39d782a5ed069dbdab89074bad4affac3b752e3424090ef929bdb956f5b407249e20e9beacf80b4cbf

Download Submit
C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui

Filesize
8KB

MD5
5fb5e557f5ffd99bf1f6e8ccd1668fa5

SHA1
0681e773c4526dd180d87d73313ac5d80dbd2cd6

SHA256
4a63fb2d9f55f2c018a91ccbbf81c3372e353f248808ac893fa2b47a15d2ee98

SHA512
1c022d0a43ba84214174f3f7b3b777d2552f0321d275720be49844ed9db7af1b2ff62bb9695499d6d94275d8955e28a8a37e83c57884919ceba8e50d686948b6

Download Submit
C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui

Filesize
12KB

MD5
1052983ff70d13ddc8a69dd4af9b9228

SHA1
492f4000967ab68162f011977609d472be1c75e7

SHA256
fdbd9918fefd7241daa9d51db8df2c143c2d21cb43c2a5d11b7640fd6a5e4145

SHA512
9e1b1021c02e29f67952b191f8b8d2e50b7ec5232d718c46ef1b5b969f5a496e3c2cd9f2a89b9be63aa543556eb51cee1957b92ec3419f7ada955499704e4168

Download Submit
C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui

Filesize
9KB

MD5
d69ba853b984e84b0ad61c3a925b3cb2

SHA1
dc23ed4989249c414cc690755419dbbf47ca93e6

SHA256
bfbdae33862cdb181ba6cad97ba709aeeae43b1a24e8a5ef8bbe46cd4736897f

SHA512
87bb35c3363669815c05846143cb8fe60dbed6aa7970834943368aa8baa4fe58f6d1f8172f434fcb5248c3b05a47bc5fba563b66f0c464bb1089b048264f6044

Download Submit
C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui

Filesize
11KB

MD5
a4383ab1fb32cd20125b413f5d3cd948

SHA1
331e65c3c921f4d49f67ff3754f1ffe676b40627

SHA256
e2e551abd1568f036aac8a3de71a44eac76a2c6bfb6901861a5a57204444fd4b

SHA512
69dcc5a2375b8e5693eac3da6202bacecda99ea53163956e0bb89ee3855ed05f9611a9147b730f5df9a5f13700154a54f831450e23e973b67902ec97e53fe68e

Download Submit
C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui

Filesize
9KB

MD5
d1fb62d91179288721167c4386e9205e

SHA1
dbb20aee5f2f176bd3bfed8695070c9f3cbfeaea

SHA256
99b9b366525f460ab1bfc28e6ad938c71b7aaadb1563425ab40b67399e54c5ba

SHA512
d5218e0c6a173230aea9aee07679b2365900799c5d3eb4f0e54cc69738b5b5e8f80403e4af5cb0fb18df2c29dc5cc947428a4e95c8a466dd130707f991c4d16a

Download Submit
C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui

Filesize
6KB

MD5
9b4fa4aef3569ff52c6bf1b7b457b40a

SHA1
8165743f2bfc232027a7fbac2ea9f82b09f1c62a

SHA256
30ed3e5827fbad58af91453be23ec4e740a1cdd8b0b48119bd5ebbbf9d77e334

SHA512
5d979e20de92b8d5acffbd6ef3688bc8e7feffdb953815c57322eff955717c72c5dba62170b257587884a5547e7c91eb41b379560990a09b6d6462139000c36c

Download Submit
C:\Program Files\Common Files\System\msadc\ja-JP\msdaprsr.dll.mui

Filesize
6KB

MD5
6f98724a56a4cdb490ca4380b37f05d3

SHA1
b684dd08b4a0329141e1836a135a110e5355da53

SHA256
b0f24648185aa64ae7abbdfda386ae207670498fff1bcfe956c3ec10b993893d

SHA512
a73c43c9cb28da6d3aa2a8dda6055b8e08e1afe260846eadf200d216b8eff613b9a4b7a5bf52387d463d445bbcdb73f187c3cd61f9cd1f5441c0a685535596eb

Download Submit
C:\Program Files\Common Files\System\uk-UA\wab32res.dll.mui

Filesize
94KB

MD5
1c0e8393414e07274b753a77d9b132c1

SHA1
ef4b3206ba1fa21f2b42eb0cf935c5f23d3b2048

SHA256
932cbd95f3640386cf0edcf64aaf72e0aa2764c527d85cf64c27db356ea8c1b6

SHA512
c708396ea7192af851385f932f574b5ffdd1bc28c137fb92e0f7b7308dc41483543ea9f3d85783fbe0508190a728966a2b6e8d83c525048053a6517164eb1aa7

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui

Filesize
5KB

MD5
8dc19a49585f01c86dfd056a750b4f05

SHA1
a8e3485da2eea071ff7e991ae4d1211ebd634f59

SHA256
d86bca7dd9ac0c3cf78e4e512d9f3a0ce2c5ffda887605795abbe6d67fa6a2c5

SHA512
7deb0fb9ffaebc6b070e019a1737918d266757a3f1c7746734dd8fa4a6c6eec25554591aa588d8d820ab67ec8eb35752e346c32afd15ea13f519487c0db742d8

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipRes.dll.mui

Filesize
27KB

MD5
df4e811a1f508b3b3fcb7eefe2507df5

SHA1
cb599d7a156161416320696bc85d281cd8a3c4c9

SHA256
5788a8a0dbef884a681afd6dfd90b248d1d80adf8bf873f1bd4e11ad644c023b

SHA512
cc450e7172d11902cd3a61e3e870e2fd417bbf248bafb0a90fc706765b95532911c09b5fb80ac31f00ac56d854f63cdb521094e258a290f3e35d6a253b08a75c

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\TipTsf.dll.mui

Filesize
3KB

MD5
eb7d427136818c0a1eccc804f97a9cc3

SHA1
9c469ef08f91aa17c282e4f5231fa6c326fd18d3

SHA256
94e3cb2085804492b7a7d0df09b7a90b82c551dd5d174ea12353004e84ac59f8

SHA512
25ea3a165598d1f7d3012eeb1fc8439ec61d6e0ba7855a98cfaf0c97c551d97787f78618e24505877a3f18b24fd3c1ae7e766cbe54c8bca407854878998ea1d6

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\de-DE\rtscom.dll.mui

Filesize
3KB

MD5
a5a32f2ce4d246ae6d9c785204f9b069

SHA1
2960cbb1d8837b97cb42d5fe1d453486c0af5326

SHA256
4ce1224c288fc63ad12c8346376bb78ab24558f8994308a7369858df847000d0

SHA512
694cf6947f7cfc38765ee6271d74ba638efc2990dddee6ceca1e9470cbade20bbf88d258b6468139213a336ab30103c0e60707732f7893b6caef1c1fbd8faede

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui

Filesize
5KB

MD5
26f08d1866fa3e976c71c3c42a30ac91

SHA1
236eee266c4244306543f3175267b733e75c7895

SHA256
d9326ea431de4b2d70ea97a46d8e5d871773a0fa9231cd3ebb0d54b4a72b4a96

SHA512
e635653a7dc6a39c4d4c0ae45f8e9dc8d4abe4e87f6dec6de48571de3282eeb66362ddf450466ebced94f7698ed277db71982e45fe0e2c70e4ede3f144544bc0

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui

Filesize
24KB

MD5
202f1669ad56aea892758485b02010f5

SHA1
b587e06daedc3ab7491c1c6c0d091321b7187e0d

SHA256
fce662445809b1bc04162f7bcffe84eb74a4c3ab4660a0f6839ef5d32e5e0993

SHA512
b68303ba44166dfe6a53e0d7d7131d715e1a016748387de884b545ee2c5c4b1bf9bef642824c5bc189ecf3fcb4224ec7481287800070aefc4169d8235297f856

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui

Filesize
3KB

MD5
3307d7dc844305f7729b891ac2265df7

SHA1
232d5b900921136c1e33e90a404d95dde142db31

SHA256
a6b8ef97c8e91fdad60151b567d193b2da4cef05317315a9c1015464d7ad9511

SHA512
eb83574f471aafecc6fbe1464e7266a838d0518a84cff5224d6339ae228bfc7f6f2dd458087957ebf7d9e3a9d0d265fa0b899a0041dab24d8c978d6835fc5739

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui

Filesize
9KB

MD5
975c271cf29e6e09e13a99a0d8291ace

SHA1
e06527ac621eaca44a8818dbb552e742d018e94e

SHA256
8fa05be698f30161b172f71d1b10a78ba8295a98c9628ca9ddc50e1c41e53afa

SHA512
59a0c231430b0d1ca0f377444acf4de22e316b1500ea27b9d5e73cb52029d3c41e745ee5f5126e63f881e0a035558f173621e11e45b1f7de5a9953fc9523a66d

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui

Filesize
3KB

MD5
5c6d7a9e278875834454745f130e15d2

SHA1
a3df4a1f214283762fd35d8d5b23b47b2dda413c

SHA256
517a58b633789ef6eda659631194d9a07a895518630e998378eda75c48298da7

SHA512
1d66e12dc197468d5af7eb0523072a226f1abd57adf06a68d7af4b24ffb545e910e754482bde9d559c4c1b69109a3ce74cdee1a442bc222a9b18bd2f661f62cc

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui

Filesize
5KB

MD5
059e720bce4ecf4cdb91f1d766ff3092

SHA1
bfc5dbc532a0f2713e8e374d58d1e97631fb0adf

SHA256
a8a10f8d9da49ab3afbc754cb4c29ec71da1f484a2bc86e34e4e865da09b2cd3

SHA512
7120e1ac168f2dadab3ba14abab0c60617d0655d430f4eb2c39de3fcea9e8d14f541d64d5fa07c9902bd27c24e66c0bfd23acb596efeda3eba933675a2c9297f

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipRes.dll.mui

Filesize
27KB

MD5
42522186308fc66b9a1a5553ca781a95

SHA1
a190a897bfef572496ea4d36697613293c255e60

SHA256
b118e6e2828ff613af1066c75a82a50c340efbf1161da66d70e9c5b5ed7406b6

SHA512
ed608e3745dc34f4d42cf01d0c345b59122ec83dc44914195bb7b5751ef664bfd6777d05e5e6b772287e0111ae64f36a14378b9f7c6aaf9fc278b6f4bbfa0361

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui

Filesize
3KB

MD5
3a62cdde742a6f32f6d118f9baf7b7d0

SHA1
764e24ffd812c580e1ac529a63f51cd47481a8cf

SHA256
71c46adf71c79811bd9a0ba9405deb6f5e228900e7ab095bb3f1d67432dcae16

SHA512
56b3870b3ed92d1a21ae3c9093dd4a2fb1a98e7351087849cba3ba1dbe8774144e95abe3ba16250df4079832199d07466653afa078ccf610e715c191980838e8

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui

Filesize
3KB

MD5
a0ba3ea3a594347ca00516bbdfc0a115

SHA1
82197c141dc55c9432e9af168d2f15eea6c3d4e7

SHA256
8dd900458a1d9400077a9fbb07dd99deb469b33c73c8593fba4bf791095101ed

SHA512
c9833d1c8d904a0d731acb271cf993ab8bb9508177f3d0c7486709f573dbbac5a9b39dc1777539f8455c352211351edbba88fc84f286365de9d7e1c57a130633

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui

Filesize
5KB

MD5
d70d50c351c4d179892e84fc5ac3b5aa

SHA1
d42158a708924fd526d2848ae0a89dbb0f81218a

SHA256
11ad8182e41d9739644ab8754c7e7d2be904bef33770d7a118e339f05f58312e

SHA512
6fef73f6e1b41e4269a7463ea9e8d9fa93ef2f3aeb8d24018e789083f4eb1a68b27dc46ee9ee2128c2a6ad8c27736a779320812d2a7bb747be4f46ed8702784b

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipRes.dll.mui

Filesize
27KB

MD5
005d81dde43f61afa2361d40ee18b6a8

SHA1
f456feff51e1439fe9a6690bae00c6de9a5e0ffe

SHA256
b1a7aa70d7701edd7ad63d32ce97080a2d1d8c67b14933502fa3b9cf554eb20c

SHA512
59ace4543eae4d2210879b7b659e24c6fa9ee61a8f124c83b3127b912ec9d2ad892f930457f16440e504d386b4b1e8caed9de80ca8def8aa80d95bde19748eeb

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui

Filesize
3KB

MD5
6f1fe49ab7bc73e7f4a3c7412c97329a

SHA1
851b097251c295ef35d72f2eca456a74f24c563e

SHA256
295d45c74a17bd4f61d44d04639c8710c36d35a42f4c7de639728a36a1be31c9

SHA512
711a33ccdc46277ae1b84086310f9a50d4e5f07f17869158b44d0e720f31a5aa085b6e21cac8bb18e0126c6d6fe919ff8553cd67e005de68ec34f867f8667e5b

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\rtscom.dll.mui

Filesize
3KB

MD5
447df31a7ba0cda5172725e500df9d4b

SHA1
2498610f7d72646789b72e563c38c6b6ca4db773

SHA256
a72a5292a63c1f2a38dc8409bcdd123d11190f8246f08c62475495cb3450cc5a

SHA512
83bbc6e9b892651d74921a74f3890a26cc8cc96dd5a766da6ab82882dd5d0cb9835c9c09333923e6a7b48269e95a6b266af4dd1bc6561e8980cd1dfa890b31d1

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\InkObj.dll.mui

Filesize
5KB

MD5
3a24878402c345579b3f4ac1de9f1a1a

SHA1
27cf18889cde46f76a0916f34e86c399db4c6e0a

SHA256
2717f6d710f2002e966aa38f5f48d0f470ae526c81b21b29f1e6b7e4465a9d4a

SHA512
e9c139b1949f5f5f549da9369b15cc32b3b7a6c8e98c7a048cdfd5401b6f33774c4ca78408f7b9f13775c0788b9c46d2459686b9d0e83cad8bd3d825cb369abf

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui

Filesize
27KB

MD5
39a0438e7e5d4c73a24717d33ed3be0e

SHA1
80413917987a258fb3b2a67960a0c0f7f4ce755f

SHA256
ee5c52ff28c6dbba098daae389aeb46002349d3cc435ff7808e4492c7ceb27f7

SHA512
7ff5fdc311f05ed733bc50d7b2443c4c0a1e253d2cbb505e350599d3cc59ffc5f3e60b43d13684fdc53ca4e574b62a2ebb4c89b46bd45c8040f6045967f8c70f

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui

Filesize
3KB

MD5
d08acf033c31bbfddf86c3de552f2251

SHA1
70be157b1bfb05236506a512960a92a15df26308

SHA256
ba7525dc2426e24ae1c188d335f70459ad48d5307be747a13223b85c459d3d97

SHA512
27902a05725f6ac7b4711859ac9f5f025d0306120c87d7a2fd4c4e082f7a564877cf7e175994c871f16918248607ef4d960b1aed6803a63ce5956b718701f82d

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui

Filesize
3KB

MD5
69dcdf9a315ad414dbba73d35c962e9c

SHA1
a3e2b6f8b22943cefabe2702ea595d1eef6430d0

SHA256
f2985dbf5569fa9cb94ff3293f66d176ae4a185953f9f4932603bf56a5b0401a

SHA512
e1a514bbb3b5c4d3349a4d64580be09e5837504daaceefa172f31bafe77aa5cbff3be4884b4ecb954a04b47b334a8aa7a6046849cfad1e0d2dc5bd5495ed2a33

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\InkObj.dll.mui

Filesize
4KB

MD5
16169e2a361b7310f077f7316cc31015

SHA1
602d9afba65aef951df5abee61ac7cd0704b1927

SHA256
16e287e9cea26d0d6cc2c6451dc8e0b25601bea78bf09c37b55835a2387001a9

SHA512
8be74b4f61d0fdcd940a20c58443b81496095c82c6e614a3fd50aa4470cd697ab9a0cc6f8139f37deec5a7fa3889d10927ddf6ec4e320a88152e8bf0b4563cb2

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui

Filesize
16KB

MD5
aba4b1d4af450941e5d6100e4b5b979a

SHA1
2b7ef0aadcd29aaef7fa73823398b4f722e4900b

SHA256
706f29ef9cec24eac9260812c88e5a3239c6f0399364fd591c8d89899f748472

SHA512
f08589488d31e9ca4b727f922edfd637f540bc629d62d80277def8a3722ed062b6139815c874a0fff8b9c2a75ba28c59691fb0553282a2cdecfee9cf18c86c43

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipTsf.dll.mui

Filesize
3KB

MD5
91f965de0e4f6efe72b1e7f0b68f4634

SHA1
5abbaffbc67e33cb09c960793ac463568f49ceb1

SHA256
df37da9dbe8302f28f5939959f4cf916596513227901d37b2242366da8cce70f

SHA512
adaf14695c9e8dbe31906faac290e777de572083db98d28e0a1f26b50f076adf9261d76e02ea8c653e33c210c66c3a55040f9861c69c65031fefe86a8c4d2ca2

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\rtscom.dll.mui

Filesize
3KB

MD5
f7cf1a61b003de1d40ae87002ee496fb

SHA1
edd01cd11464f89e0910809703c597609ff2fa8f

SHA256
65de650fc07e2051365e926366df52a60835cb68a34f96512ef211d5b3fa112e

SHA512
b4a84183cbb1b81a97bb92e1bf25414fe0a3de374188b8b8fe89136601441840ed9d20463bd2a8d71191a56241cbea76403f11e6e4e1a8e7d7b7389aad1cf084

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipRes.dll.mui

Filesize
26KB

MD5
f007536448a0ee9e92f4b410dc4547c2

SHA1
da5da2554e52025d60ef52650a5fa1ecf3e23170

SHA256
8438a1d59888dedbcf0d3f1d660013b4c512f070c2065e2d292300f5dc2a8246

SHA512
a6c4deed859a5cd5304edf610a5256089696fc1b64955563c6f5d5d4096ed64a03d57592c0f1050f7bb2ecc5ead780a407dbc725f81aa9a2627677835f470c43

Download Submit
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\TipTsf.dll.mui

Filesize
3KB

MD5
6fd1d1d5eabcbf8723a7687a152cad6b

SHA1
597e9224c20c3d7872e8fdc6cd8d1db33a41f330

SHA256
e8a0ce9cbc2840a1499009b57bb781c1bf42d9a3c2a585843e5d1779875a682d

SHA512
0d54f0438ce80cf3fe0d08c1c9ef087487759b77a3f27c342f809c33956f5fd2f99ff622bea3007773252eff3b0d4978b1a1b9ae1313958bb4a1758688095e64

Download Submit
C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui

Filesize
6KB

MD5
2d438e33d83d9204d62f2e97731ce206

SHA1
b2f82b60c59dfc1c2e2e37a4d44cd962c8ac1e1d

SHA256
0f8cbff28c7ffff13ea74f3c960cdc0a9d93da331b73da28a51f838e09ae0627

SHA512
d9c85b29b7587ca7b38a9237ec48feea47890674e9ef7957a6c1c64950459032aba29867ceb71c79cc5aad3923b929ccb6c6275bca15918da17a2e3c6cc5e7f4

Download Submit
C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

Filesize
5KB

MD5
0e82ce5de39c580b0864c324c1571c75

SHA1
604848385d8961a4c2a1312898927a08354cbb68

SHA256
5608a14730fb89b726c23a5526ec0c597a94b1135e314ed4d86cdb09e9acdb1d

SHA512
72434b687402ce2cd95a04295f41e6050bb83f7d256d3526ebee993a254b0da03d657936efdd15b183676dd99047ebbc72ac22f6843b8ef37fe444883c5e55a5

Download Submit
C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui

Filesize
6KB

MD5
2625bf56009e9b3adcf1eab16a2672bf

SHA1
2c75ebae1b39aa5a6d7eb46886d6bd2df187aa14

SHA256
d01a05fba02ac7e36429dd73b9e7f18a3979aab172073bdb97713bb4eab2b888

SHA512
cf0774fe0710bf3df78c0878a8b7242518e3f5dcba302d244ece93688d7d1d2164f55f726a0782f96783ae5584cab45fbf2841f8fc9f97933e499667b7ceed0c

Download Submit
C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui

Filesize
6KB

MD5
d85dff14c94eb89e44d307869fd8cd98

SHA1
8e576ba3944c8f812307e50fae538e92fdaab591

SHA256
3414ef903fcf450729255d9f1b712cf6d860d082e7d6aae67ff9df72601a1a64

SHA512
22d1df5a4890e5d338cb53dc9c91d7bcacb884d02d843cfdfe515ba356795bee1e86587ded0992fb3edb184d6697a0235ef2986512d88aab70d55343c8b87d1a

Download Submit
C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui

Filesize
6KB

MD5
9091457b1c28cfede76f2d32844c5a3c

SHA1
cc8dd3dfe56b17cba4deb1d8ea7616fc14af6da1

SHA256
3b5b3fe692d22dae635126289b707d4aff1a4537b49739ba7d3687fdff29543a

SHA512
3d0216081954caeb2ee87bc0ead64c6169d5e9bad26348dff892d419bd7cb0c65053295935352e3f11518dc197c51c37bad17228bf00c6f3ea7cc8a36057831a

Download Submit
C:\Program Files\Internet Explorer\ja-JP\iexplore.exe.mui

Filesize
5KB

MD5
0fe0f089eed67979622b72bdc7e793c9

SHA1
019007af65a26eaa5ff26648df036a2874ca7a0c

SHA256
9735fb5781d201c524353025e226c4d84046c9cd1963e18b8ac352820b775407

SHA512
b0e39042e53ff11f2b680fdf147b04d97a6f8bdab339dc8cafa8ceae0a26e34fcf43d68b5a95f70bc206d5a064ca5aed017546db20659b7c7d314b54e2f72254

Download Submit
C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui

Filesize
6KB

MD5
dc01badbfedf9eef5acf3b74760a218e

SHA1
180c799cbe82271de6232a047ab5baf2b8156362

SHA256
8d1479f392d4488b98e9be146678147bc892ebaa3fa4529b7a2af8af9dbace9d

SHA512
73f8cbe5871694f451b5e37deefa6fd1bf7e1ddf4081035dc43bdcd60248618531b991dd10de9f24ebb8427d7ef8e3cede0c66299582a799c128ab84d6f272cc

Download Submit
C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui

Filesize
2KB

MD5
df9d44482340b177baca6342c777ecff

SHA1
18e58a26f96fcdd25016959f55b742c8f86b4ef6

SHA256
2c8894ee30407d593c9fee78e89451cda7f7d8ad31a21e96d02954dc58d10b56

SHA512
eff3fa8126231164dda697dbe9c1ac057726cf22780ae15e81c3a3c87eaca3f876c55b942a9a004c926b0e5c7a798982c71268f4cff4d0fc8fc5c2ff1c6294c9

Download Submit
C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui

Filesize
60KB

MD5
0cfa05faaa150b32bd54e108f6a0bfef

SHA1
9c56b53c3db5eeadfd27b1772f8236cfe79f5c4f

SHA256
86a2c0ab2e92cd781ecf84f6c9fa3e4f1de2648e5837b4cdd345cb64668c8d20

SHA512
5d951222e72b1043cc142340f5dba391e94ba2551ef2013f17e669545ae74a60da7493bd630dabf84aff6f1b6cd30ae0de65e58909998d656a552af27046a2f3

Download Submit
C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
dc1a5f463cf20b2da86e304ca3337321

SHA1
ff202598d2926a5fbc773479a18816012800d4a4

SHA256
2884a42c89ef98b0a664ee418c67fd89a32a9bebe8a9e585a30dd0913c8837a4

SHA512
0e0170252d96eed556c3448ae68fb4d17253a12360d40dd3e6ed79c0847e7d4d7edb313c685150969117c96769e524c917994b00e7bac8279a33dcecdc166aaf

Download Submit
C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui

Filesize
58KB

MD5
2c7b9f9a4cdeebdc28b4ca3ff293eec6

SHA1
d46fc3085b7693223d9cece7d5b30910f4858e3f

SHA256
6e5553ae447950b4c4c43474aa35b144ecb4cd22f2d27ba8345bba84d9b5599d

SHA512
a1aceb4dfd2b9df2d767868d62f9f07b4aa6d84ebc4c61678377fa2c71eeaf54e300f6bcdd3aa77c4db5fbae8b1df0248ffe2110b82570b62b8282f9553bde2b

Download Submit
C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui

Filesize
3KB

MD5
b884a49cdc7d32d29e1e5a08a4135072

SHA1
198c67c6ee620f7821bf57edd144e7ec66c21677

SHA256
5b01664836fbec9fb8465fc9399d320813c5994dfc5549b63c2dfd0841877870

SHA512
1b96cb4704c1afdf2e5231f841d07556757c76ac13284a577159a720a9e7f6025b65539ecb6d98abe5579aaf721a7d8d7bf0a650aae9df442ab563594377db45

Download Submit
C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui

Filesize
61KB

MD5
c1f21c23fde42fd5921c616cbaa50f4e

SHA1
da2787dd8dbb2387a96b42e0e2ebbbe913f72998

SHA256
f696df1afc141f70762646cbb71a8d1f56533a1ec5d674f66a248f7314248279

SHA512
a802cbbc31805a1baeb160a080e7a3f6aaa55c70e892a8b2019873997187c143aad3dc76589ecdab69c482c988f7e6bea720f52baba3676ed27f1bb2e49e4d1d

Download Submit
C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
2KB

MD5
a6843a7975683e9564872da489b4fda6

SHA1
e5ab5ad993f46d0d0f76cb77cb4c9e068908c203

SHA256
0663232ce266d9082df42d6d0984723f24963eb391434c0f853eb804544afaca

SHA512
ce792dddbc1edf5a0144b5f5a2c760ea6e90b0d2906e519b7f325b741ca54d27132035ea1d2e3907b0f6cb4c717562517c495804a26756a688da72fd0d34f108

Download Submit
C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui

Filesize
57KB

MD5
6b333d2a8b50298ce466c641d311dd65

SHA1
83a24db4c9c4ea606946d6b00cff2f25310db636

SHA256
85fe7b972d6dfcce5e52a83b921a94ef2335681160d17e5722922fe7e47f321c

SHA512
3f13f574490ea6ba9dbbe472a0100e9a6c873d4a6cef6084954ed2a541b4040a77656bfa3014a334c1512c6a821844d4bca4c84a6a439f2c2486feb9a40da4ab

Download Submit
C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui

Filesize
2KB

MD5
e9382657de0399d9b33dfc4536f96b5a

SHA1
a2a4ff70e8ed0ef92ca5c2749df478f5d19da44d

SHA256
69a262dfcfb01b2da2bb97f0bf5cbc129f2b73359e275d2ff07c7df5c3d08066

SHA512
e45282852e26eeec403f49e644413b445ae2d6952ddce63208ffa953d4fc07a061f9f126085e4b98c13a29064cb002fdf7c2163a239a19f94a904c3cf0c2d7b2

Download Submit
C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui

Filesize
31KB

MD5
e231d294abb9b6a763d009f8f6ad41f2

SHA1
a1f55ad2d72690827f4336cca560e99f95c948f1

SHA256
22bb45a4081a9bc2ad24ac93e7133370a2738bf8a27787a3def45505a167b309

SHA512
fd1ca563fd241323dbb5fbd5384fe42091cfdb72479ce648f06643b90e79984b5db9667832e841594e4f4d7b9c51a85acc1924bced8a02255da02fc3672379f2

Download Submit
C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui

Filesize
3KB

MD5
af1873ce239ee045c8cdd3407be77020

SHA1
73fc8ff2f64d058e9b2fbe3b3343de23755c1c4f

SHA256
37d731d7043c8c572264f7a982bfeef1518047ca8b98ad5fb442dfa32a375437

SHA512
c10296eb95507dbfc90b224a384b06b043d97d1f82102824ea701bc351e36847e566b65055c2178d6585e2f4c900109f1b000a9b3c58cf6c79dbbdf27912b3bd

Download Submit
C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui

Filesize
56KB

MD5
56654a4a23500d0a00a5fa75fb19c298

SHA1
ca1c4609a02d47327c4a85bf87f7a29b52cc13de

SHA256
e00ecb3d1e766785fdbad6f2fefee6f8a16bfb561b2d8250044179817587c543

SHA512
34b5b8f3001362536ab4b9467afc930d9d24cf483e70eaabb4ac70b6c6bee077bd1fb80b53a6408cc8bc3d8ceead4de1399fa378f84f49d87ee91b157c139eab

Download Submit
C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
7f07533d415386bb733e8db1b1ac6294

SHA1
2a13806666b67abac72482a0970e49ca4e0aeea1

SHA256
46b26e66b44248456d1a7ea2e2a3e1383647e5be23b9984f83de4809b966bd28

SHA512
07a357ab96651e4ea6fdbb7077392f5102911cfdb9f4050ded002c1ecda4aeb57fa8b144cdd5cea9db80bddb4ea7ea990333f746fc66528a2172cf788a3d207a

Download Submit
C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
678f7a694d72da8d217a64647afd5371

SHA1
4d6375509e454976b36b11f281571cc0538b7542

SHA256
a5ac9bf29d70705005d451587e53ea16d8d2ac8c28ad6ad6b72f65c04d9bf452

SHA512
e3024f74742a8a88847bdf4fef966592c11b28b76d91de316d22e56f8e63d9796d4d7dafea71923379b89b42f8196c32e087317c5cd8313ae5f79d52ab095bb8

Download Submit
C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui

Filesize
61KB

MD5
6bb7e1ddc94a9691f7798b1b24689fad

SHA1
d2f43b439dd96af8a6f9a4220ba0b25e0fdbff15

SHA256
14e5f5a7f8fd14ce34bcf1a8d5ee958a0dd2f99782c392dcf968c38e983cd18e

SHA512
c1c9883d136a78147ce92fb322c289e2af360ca7f7d2d009d42869f6f515b3d81cbd770bf38f0bb2a9312362c0b86eaacd24d1a369969caff6b3bf007eab63e9

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui

Filesize
2KB

MD5
54390ecbfb4275851f6891638dbe3f72

SHA1
ac85b04087d2467baf68109bac2a5c7ab7474c2c

SHA256
7ed1f23a3327168acb59bf0d63a9e620b6608287f847cbfaf14e848bce69f529

SHA512
18570472c6c5d8998f24ee5938f920e2c000b5115e6a7e07cee0ae1a89fd317c23e01a944ac7a5f5e647a3a84fe25a8baa7fe145951bca8f63654633cbbf4eda

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui

Filesize
3KB

MD5
fa9440c68428cf68c2f2c2f59ffd869e

SHA1
f45b696a5fbe5e8c6230e7e3ed2eb9045a996364

SHA256
99564b4644a527f6a4c53ed5b436eefa4a89e60b65b4368686de0a7ecff3675f

SHA512
62998392628e27a76778dab7806b36c4b8a9e8ba349ba54a58923262bd64922367c9279335b031332da89d1d86d659d294e77696f1b3747a8ff6ad8ebb9336cf

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui

Filesize
4KB

MD5
e41cf43acdc3915496557651f0780b64

SHA1
3961c4c11ef52615facb3877d2a7a2e063214b49

SHA256
13c3bcef48c57bc2071ec22b41c8b3cb842ee0fd437003a554fee4e1047c51ac

SHA512
54e513c97e1868de71dfa4a97b52e16d57cb10b27af927df6041f2b177539b6f2fb865b4fdc136c3f7ad1b02d70dda0d7c4535fa6bbae717c0d91271d02a2b84

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui

Filesize
3KB

MD5
2cdfd72e1a5a6551364c8c9214a7dd41

SHA1
b8174d7eecc09a2359b33d939d27b55f37563b35

SHA256
f7728703317457949b0f36b1735620840220263c541e237daed1887fc5fccda1

SHA512
50d76a178b81adbb5538f924accd3d1e8b74d0900f4907d72f8376607e877d8e2e678c7b80cf59199d1144a1be4ec2872f943dfd5ab0ede8d2948fa277097175

Download Submit
C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
bb2741c58ab5f76a58ff84dbbe0372b3

SHA1
5e8a0ebb141710317aeb7e6a03d036a6eb4a21cc

SHA256
9ef952270b139bb3d9c978dc8975c2ae94c907313b90026b9251a3896a95a525

SHA512
d21faf34da55f6443fce07c684e4ad0718f0aa3352efafc55c44220c17174ac1c2313fc6cd93d1f067713520ba004e2c823031347f0a1c6dc05d20d5c40cc0a8

Download Submit
C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui

Filesize
3KB

MD5
2b4544dc80ed7b6d7e0faa3ff7adbbe7

SHA1
6f72627689817e44ab7b85363338207cf18c407e

SHA256
b8eac4390e0943bae4287def72b0af7285d39e6cff426090d972f9b745a21454

SHA512
e2e1b9ee78bb610bf54d6fbb1f7d5e70a8f9fd53f28b50e5af7c89e5e493f4b1087a297ad9059507292a722d7af485444b819b5ecc72c18b41520eb373a5dc6d

Download Submit
C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui

Filesize
53KB

MD5
59989ab728379c92530ae9a9cbcb3de7

SHA1
08f616bc9fd91f20288a5ad0aa60500e312e0d9c

SHA256
a9050af0a7d8ab7117f0fd448100f3619c00132bc5b1d0c47a3229417e0c145e

SHA512
136034d3fd8218473c207ab718db6c6b137af0c878b92cca2478b46f89af0136aa4438419cc891bd032a3b9ea6f94093638c3538085c569e8a2fd332c3faf06d

Download Submit
C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui

Filesize
3KB

MD5
dc2ce7e83134dad338a6fc15a2f1bd28

SHA1
e015f38126787d5ac880587f56b767f8789e70f0

SHA256
f214fafe73b57bfd19b8258ddde0f05837bdc8ef6c0523824cb516565ac895a1

SHA512
e59fa143818b5c4a51611c85f43084f4b7f44e638422b291a34962460bab1dc539e79887e2f961e7ca7ec47d19ff54a9867ecbadd254473e35b9b4b7ef719009

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui

Filesize
4KB

MD5
629713be891102ef8f46135859f4cae6

SHA1
8b9c1b9169c84987a7abfad95bcf2cd62f53220d

SHA256
01c8e816fdc1b694a8b192357b605d3fecf39d4d14f577ee78744976e933ee2b

SHA512
3bf973221b8200c7f9c8de62eb3f18e0780f2c8d168c940f276993bd4b406bfb974ed2638b04208afce6dcb869ef0275a127d255c5f6c91207220de48a0ae5dd

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui

Filesize
3KB

MD5
e276685574fb824335ca4633a3148a3b

SHA1
ad6d97ec72e22000132cf4e4625f9667d6c90e7b

SHA256
62a40e2784f309b7bd71c493efba85c24b4baed4aa2c96345c98b9009836e7c8

SHA512
b1ba6a0ffb5d0e0b09e9e7185c74fb33d95a20e004a03e18adc2c491875e5877336e252c265b4ac05d71d95575f15f8732b752ff2768c431a74bae2be6cbb5df

Download Submit
C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
a1a7f075242b34083027761a24b21b21

SHA1
fc9268b4717cd6ac31374566ed0297d69977294b

SHA256
1c59094f960dc2c96ca0077db48c31012fe3bdf6f3fdf1e003be37fbcf6d2df0

SHA512
e933daba425899f82f30dbd3f7d6d8a692d9d8570f913e46fe9e77b313cade34a4196dd7a2c7ee96c84252cf1e1b063962559e09eba974516a690dfe762e46e3

Download Submit
C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui

Filesize
3KB

MD5
802da16f58a102c83eeaed9ab0aa4d74

SHA1
39b8fa00e8b37cfeb3e459ccaf3f2e61f1cb968f

SHA256
095593e8fcfb77e90369183e2a8a292d239128a6ba068dbddd093802f450c5d0

SHA512
45814065b205987b72d1504a0b723c522e0d3240c5f30985febf6689824f92a09e771a1bf5ed6af475ab5f296fcde900610351a4216e7b75121fd02c1fa92bf0

Download Submit
C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui

Filesize
62KB

MD5
d5019b1afcce42a69841c3184d942930

SHA1
9529853e5b6ce40bb43a176b19fd72c7c8958bfc

SHA256
0c7875aef5f0b46ccd7938036869762b4e5f6477f03bf82cc543b2f9cc0a93c3

SHA512
04c256b72aec0e60da319e6511611498e8f5a6927ce1e54aaf5a86b4c5bc3652d8ac504016f3b29235cd5fd869eca6a8b2cdd8f80207ca160792459cd1fcc4af

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui

Filesize
2KB

MD5
2d88d752e7dbdd265a3f254196952b11

SHA1
f5884a2cf1f9a9356afeb7a44c538d84c2963332

SHA256
7de4ccb8cb5ac8a8d6a90f1576c3ec633a4a75e95b0a5bff80a5803b8716aa1d

SHA512
aceef2aef5c00c882ce0374fcb35f50e3dd8f8073f1833fd581bacc62677b60181f68e529568ed0e44e356411a293f05af8a0a872b30b56722af869bf79dbf17

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
3KB

MD5
8160203f3cec0b420224e167aa40151a

SHA1
78f25b9d7f2aedc153246e52478eb6e81e556d14

SHA256
d04da1abf8b1833fbb9d1a28353a8a019687cfba8cb5b2044854d3d20691aa9d

SHA512
c3387cc493df87d2c02b45dde5210860895c69d93cf41e9fa8b48775804c693fed9b55e2fec4635f1ad81a905a2244359b5c7ca1c4191f2587ad638b176ec99c

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui

Filesize
4KB

MD5
19a4231d672ae694fd9331885aa4c5f1

SHA1
a8597e7b4ec1682fe6e47a4d3b93af8cf9d56849

SHA256
11e011f3978e0b9708051cc32d4b8372506c75282ec325cbd702beec4fa4e96c

SHA512
a5aa37751c40e2666c30c5234cb3a5cd21476ab1b712dc07641d79b16ae8f76b95b316ae536f0c4348f9c73cb8ff008599e9d9eceaaae7e05240e87f0fb288c4

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui

Filesize
3KB

MD5
7e29522a715fc3dc0eeb167ecaa8ffd9

SHA1
725ecca2e3f50ec08eb49cdcb5ecd6315a021219

SHA256
879c975677754f985829b63fe5c5b8f9e5ffaaedb4daa59de4e12093b5617d0e

SHA512
f22c4ea9ea2ad15c2ad7603dab11c980198435070bd2ef8c9964fb0722dcae8a0cd2dfdb982897b8147f834a79e900a08df455df321d39e8627808d4ea9d8d25

Download Submit
C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
538927373f8626c2dcca4c3193f447df

SHA1
9131eadbcd336ee2a6918844e3c66e0f3e248301

SHA256
63c4437a977f8ad018446625cb787cd235645b8a3217886a7675bf253071dde7

SHA512
4333e31276a9a4b097356a743058323dd29a33d82ec3a6743f2512a35398a1874c343114179c62d62b5cee7c234d835c38573cd2e7e74c2b86d5988d5e3df49d

Download Submit
C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui

Filesize
3KB

MD5
99166c7869f97c18275292a081453970

SHA1
f7b27f91cda82b4de688d4dfe1a428903f8b5a1d

SHA256
e07c9085adf06ec8684949a43eac72b824f3635b6325ff6d2ffeeee8847062f7

SHA512
0613f140ee4af30e220a552d1056b3bdf0abb7f880d5c87ae4ff1ac3e8fa1ad3fa49515224bd36e56d73a8b55a2ff4722e7d894ce1311b3e98db903c2f699882

Download Submit
C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui

Filesize
63KB

MD5
4b09792394b52971d666c4ee23c234fa

SHA1
daa1eeac7f68ede604c7258910144c1eb3501144

SHA256
ae18467e448cafc911946316d814a2a89667af67399c4ce82a5ec0cbdad4f343

SHA512
f9d2c60667636f6828ef263596a80e22f63e23415894a37a68a9f2b6c7a949b46b78acb60e2b49f2501682990bad145746f59e2d92d50605eddad1f9a86a9550

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui

Filesize
2KB

MD5
15b81a2ecb2190989c9ec76536a08584

SHA1
0d443b9c2d806c580f2dd12e42aaf5079e84e163

SHA256
4698639b78db50b71ba8e5d765d79713473e715813d3561bd506fb9a77f78801

SHA512
43123eacd16a1849785a3a8efb01b85fb2320769229192b905af7448fcffde9e092bcec62376513c160ad8ee3d7142216796ace7cfab5d4008bb824dce1f51dc

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui

Filesize
3KB

MD5
ccd9ec4ef13d7034f415bf42c1301742

SHA1
a9aa593f9ba01550e837e67b8c352172d69a5960

SHA256
5b38a4b28ceaa7697477a00353eabd05fca1ca353387ad41b802d33b4e49043d

SHA512
d421ad823dd5ffd45bdb328b4928e2b5ed28a81c96cd1f6afa5287e7c422964a88e387e75b478f6ee22a127c61d7898ba0076ec3c708c3ec7577b616e67cf095

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui

Filesize
4KB

MD5
4448226e0e40bade66f6d70f1f39fc81

SHA1
5505d988f474e67cfcb62c5151986c7266a03af4

SHA256
68c214faa21d0399959fe32611b8df177bdb5decade8b18163860357f72c8070

SHA512
b6d4a4d175eabba887400d4b611f871464d2f005cb094c9317a73b2d98007baae521ef1eade0ee594a9e7a43df7157e4d31487556e007bb4236a2f7b790a9698

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui

Filesize
3KB

MD5
9e64d6483e5bfd139aa7fd4de84d74a0

SHA1
05a9648e0cdf0e0e7181e4588f3e407c986f69da

SHA256
5f1b909ab24e4c03cfda8e7b326a2fba2684311b9378f97f213069bd11afaa17

SHA512
20cf891ac610d513b81b4476632c8e63b785928894bc314f1c1ab439d435148a45eedf1fa12f213c7de3e5b9b9ece64402bf802d144b11191861401b737bd041

Download Submit
C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
12f35dcfce10db8d5ea8eade967790ce

SHA1
738c8e612f48b177696704e2e578de9974699086

SHA256
cb89e85f11feb7384933f1f66a67a0c61119a114d7b9a4ceb53fe7ec66b66193

SHA512
c9d64b5e75844b4e242ead72ebcb65d40e23f9033d718f8ad80277ad01b31107f782f7779335fb353e2e2d35297ebb51ba2125af9704f671dc3a1a985cfab088

Download Submit
C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui

Filesize
3KB

MD5
9a5582d89fd67c812bb276c28ce7aafd

SHA1
5ec10f9b4ccdf6fa099022214aed356c890d5f14

SHA256
49b823e02e7af155619f6346eed93ff7b4b6c014e9b886cc597b4dc7668a826d

SHA512
1ca57d7086d5100da7317900a84b58e69e8c580a0ecb35f0882670d958d09df1afd67fd341cd1edb8577ef91915d76a72081ef59a8b3c429d809d9e84be0e1d5

Download Submit
C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui

Filesize
61KB

MD5
ec89cdc83e20d56db924cef49e290a0d

SHA1
c688e8263bc7a6946128325936f0a85a14cdd301

SHA256
5239c218d95f709a6cdbd74764fafc255fee9ff8da5dbfb5dcae563277da246d

SHA512
5262d9fd8b5b7dfdfb6b00bce95af2d33b9721093088dd91185e5e6d66da147b58279233a874d176a4bfce88173eaec953e07cda2f36721069c4708a150ebfbc

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui

Filesize
2KB

MD5
6ba0d36b5ef8cd9f4da241cd1a73e46c

SHA1
c442df2ed47f8e6bf5ecde3446456696a1aaf433

SHA256
aa35b49a266b8694d539b3d24299ba1a6e97759d372bd930c96c3fa79623a588

SHA512
c809b8ff748fd2f57ea1e738962f0eebd9678b6afbe28a069c2c5c3a648705e778cf2a3ed4fbd1fe1a6b302cc33ee60b6ea656017d0cbbba64488954512b0919

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
3895340272194755bac3144b09e33c72

SHA1
168bc2d45fabe71b0c5f5daf09e68fac5c20dccd

SHA256
d0dd32a6cc03b8e9179644047c9502cdedfb9a84ed6310f8aaba5fc96278f1c2

SHA512
1ff9bd43a7b10f34e38a11beb40978080c89db781ff340ed785227c5510ae6717d3115069e0153808068b646cde523ceae91725357e7c9ae6c5dedae16dc6ef8

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
4KB

MD5
e29ee76771c52588c00dba1364a0a1c1

SHA1
b230ad579ce96863a1e0f2e7be67320689976542

SHA256
c3430af21366704a0376f59dcdc765a6db20113922898b3354b3bdc41e3b5183

SHA512
d34ecc4bb01990dbb1663b566e336cf7e3bbf938d52b59b582ab4309be6c9e4b33a6d92fb35a84ab02fdbdbf4f30083101213786fd103d703d00091e11ab91c7

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui

Filesize
3KB

MD5
43b4566e3db794d25d9842b94fd0d137

SHA1
71ac1341b49c4c47698d39fa981a6e24fd55e36d

SHA256
7817a248ffb1aa13703f8eb046c00c22d301555f170c2af23ac0fbb563f4d91a

SHA512
f87910d3b550de15ea7ee797e8068504b1ad2aa37a0f5d7c71b4179f01eb1daffce2c20eb5454096e0456e87b3156c9e3dcf243c1d51be3897a409b5e4f7fb54

Download Submit
C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui

Filesize
3KB

MD5
b241b1548f29f7b4c96547bef4aa136a

SHA1
40d75a1b5f9054fecb19b0b8c8904c16543c9a9f

SHA256
55b4999d17efa7fe7af9fe50d7e68740da6bceef8e79962f6154461ed52cfa49

SHA512
dd3adc6fc3aa26d52b347cf92f44edd42dc8ecd7f9a347bb2b94dbf953399c4205be3a0e92e6170d4b4772cf3b954f85540708f11732e0c807c52803a6ebc0b4

Download Submit
C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui

Filesize
3KB

MD5
9baa4cdb6edd592f8a172e22e3fe46b5

SHA1
f0c6e66e0da3e07e06b7f9c635aa81101a28d27c

SHA256
6f72e245ec7994afb0fd34f1ebbb8f3685fb73e8c095513bf8447d5be4e971fe

SHA512
82109dfe6a4f14ebdf5d898c7bcb4f349e66fbba0a60b65613cfa567f39d309298f1b6df1e771dc296e4757109eed1d63146643626af6b54f83f12e99f7d84e6

Download Submit
C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui

Filesize
40KB

MD5
4f368378300c34cdcfebee945b7ea288

SHA1
32e13c79eb3c7b3f555157eb4dd4ff51492ebed1

SHA256
17eeb6ed140564b9c63cf9a3793f31e3cc4499babf2275a75abc8c33b45f70a5

SHA512
2ffef0c8c53f5a4c5319f525f8d9a4fdff95d95495855d865dcef58f73fc629bece395928b3e805fb1bdb2f2564253b482df0b0cdd9f1849cf3eb1e8fd403db8

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui

Filesize
2KB

MD5
bd2e9e655d6566f95eb1fca026fdb1d1

SHA1
47b015a21b0f83d4c9b98527654d2014cd76b785

SHA256
a016bcd17161d24e2b7710efda53c2066f152f31e6d044730a7d64850479f257

SHA512
f149093fbf7af94b6e1da64aab3caf2826f958fd1dd9b8b63b2c9b7fadaa1cf60273a605d897ba1a7faf7751af30d66809adc6e137064c14d4a52481f8d5db0b

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui

Filesize
3KB

MD5
f47e32de382559ed2b937b53514c38bd

SHA1
ab42f5115287fa66a19fb3b03ed56a4ca8ce6d46

SHA256
11c2cffa4f1d99050d3cd40f7bf6c022984a865237b60b009189a6747cbb54e3

SHA512
25ee3ac7d0f89358c49583d46a82f349b4d3e126d98987bbeafe460fde9d54d1998ce5fd63298efeddc3ef5e549786d5b4b280e06994865a2e1d2ca0b0e5a171

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui

Filesize
4KB

MD5
a9926099587b1ea69db1710c114058b8

SHA1
81b5775972378e562d228638df139c11e2409840

SHA256
57f46b272522a5cd24e1c742d303ecd9911771d26e718158b5d5ecdc2481d8df

SHA512
c6d16ab80cee7f7f0e6455bbf399940794cf2ac36945da48ea3ed6894eacf3f46e2e8935cdc59d8d64e07c59ea80fa8913b78acfdbc90165e0bc5e0a73032fe2

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
44649579ab8e1c22f71c09cea70d0d3b

SHA1
44200687e73000f039e28a33158ffa7a270d3ad3

SHA256
6857c0e5e27f7e29101f9ed3b2ca54fae253f6a0544d490ce389b9f0ee31ba5b

SHA512
a7696443ffd30802664791a65caf5fe94977fa08afd119b317fcacf3b7253af4e161a789c4434e7715f9d3ecc0c2603d49feeba0f99a80dea7d46774be774cc0

Download Submit
C:\Program Files\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
0fe3dbb4385a8c19d38906bb41322f22

SHA1
d2ed3a29ddcd8a224d051fef89a8a88e2706e024

SHA256
0a5ef71624f12238f0cf6725d90d803dbca9be3b7d818606b1e223f647952774

SHA512
1921968894854690cd8250f79dee8029eb2c9cb1c3c8940336967352cd6651d73550097bf92e592505ba45365327a8452089c99b84fd5b68654cdfcaa8d21d30

Download Submit
C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui

Filesize
56KB

MD5
7de3d17bcefe51273375170275dd815a

SHA1
5cc1025164ceada1d82b2d52e5fb1ec28d33ecee

SHA256
2d3c0c961a46cfe46996f6cad38395ed1667d93bfb17deb550728f83d6dfdd29

SHA512
2c8ac2499de168a7b9615962eab033f09d5f072a65951703a0f60320deb92b84a7e9222282a194bdae985b040a3e20367b5883f2ef670d80d285f1f43f61e430

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
2KB

MD5
2451776c7686b9de32aba9c4e52e8780

SHA1
56a3f2b7031240702cc2b0768d035055dea2f3ad

SHA256
c088e00cdd1f53459f30eac14cc05a15fe45b92eb117ffca206b921b8dc03032

SHA512
53f9c0a9868ddbca0e8a62877527918c757f4ff392def1c10cb634ea0f042e55b118c23d437817b6250aa28318a1476eef2be9743d6824baba3d86269f8e2946

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui

Filesize
3KB

MD5
789fe847f4b4b3262392e6ace51d8b53

SHA1
72177e48d2f21659e3d0870246d969dd3f45ae5f

SHA256
9f91ba6711149f7fbabd1f8043fa93882d14ec03fc1a42f504f9e4fb1734e24d

SHA512
0043f997289bed65b2ff7ca04c56dabac82380a963ef5668463953f788d70bc1e0101723f0f591465152c7a1d662c1a62ef054b1625cb58774daf309868d072d

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui

Filesize
4KB

MD5
2ad11fce4a9e8237db52ddf42cf2b3e9

SHA1
53279ec0cf486180f874cfa6684cce368d1a76b1

SHA256
4a1e98113c37683da90796503c27a65247509ab737c97d33f2dcac220df7284b

SHA512
df24e5ab5b2d2c5ae24e6ed3add556fa595b22a836faeec32a2af126e2bfd4bdd87f9c79e7c49ac1ef4678da4559152feb1671e9ee9d682e05a862c7ac0c84be

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui

Filesize
3KB

MD5
89085f1fc8dcca7474961b38f4d523f4

SHA1
7ab31ec1ac8a498407ac3b8d292edafe380c6628

SHA256
2f02dfc2f46abf88b4ffd73c8bd0f88e2b2321c2657d9ef020e356ac55247884

SHA512
ef605ba4cae39e39344aa7c41d75a63d34101fe5c34c486d77de44a34d26258ba18fb10028ea1cf35001733c940d78d679e54b9c7afa91fd048010d0285b31ed

Download Submit
C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui

Filesize
49KB

MD5
d62c9847de9e1bcec5321dab63912255

SHA1
339d65a27b767c9ef13fc81f8eff51edc1a5f3c3

SHA256
8810c7269bf755c09e390dd27810e8a14e481c7ab7c11cb569dad223524f8894

SHA512
cf872783bc4cddf857903bfe831d01a3b5f418392ce13b17a888add676b79c299770163c39f828791e0d40e394c8178ea99d6be9d658b8aeacb9fd7b122dec18

Download Submit
C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui

Filesize
8KB

MD5
43077200979c9a3630fd40bf7ba4ef68

SHA1
72a1289ff8786c9fdf98345b375150888599b0fc

SHA256
ec125f5a017e4088abf4cb8b7286c7d3a5b4f5bb0b90c0c39123133a2d6a93c1

SHA512
b9813ef05e14296bdd1ec8fa2958c1b7e2c26d15b63b4913b8a812386311d604ace8ad0bc7274d642e1fb94ec90e9cb2979caf540d7ac21069f3a8243edef2eb

Download Submit
C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui

Filesize
18KB

MD5
a78645a739585b83619e52fbe000c431

SHA1
7bbb8a151bf657a63fc52e292b487a5b3e82ecb5

SHA256
11ea6e07d63ea6820c4c677bcc94c3427a3fe3ea7a5d3c67c581107e0f1e9251

SHA512
0b63c736c56a74f5c2a43b31a39707ddcf31222c24318d969aee651b5206558d8698b4a60c3c25d5efc3aee451815f5dc872ff959c90b0d6fbaeed2391d03478

Download Submit
C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui

Filesize
16KB

MD5
40e33f6d0a596bc6454b0f24634bc79d

SHA1
a90b5ce00bd43aa89eec65f15daa815535c2220b

SHA256
4d18e575068da492cc34b13c1250dde97a5a2614d55d220a0185b4b0dbe882a6

SHA512
f2aa49b2f06dc6d12acb57a96404f140061a062f4f5d31c2d84e43c79e34422f47e536c8a3bacbd01d0bca9fcae0adce8c89e7b9e95c328cd0de054ef2eb3f67

Download Submit
C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui

Filesize
18KB

MD5
404406c42875d3af0605e1766e680438

SHA1
283e3051ad9cc756bdd24100bc8eb34949b624ee

SHA256
471b7586aaf348f5c073be964058b530f6501a55b54ba4c6624320be971c3938

SHA512
fde7096a16137e6b32561bfa7c8ba9024bd1aba6259b58de2fba53d21b8db4bd3358021d93d64940c600eaae79ba817c714e7b00a00eeb6df8dcd9a4197a1c14

Download Submit
C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui

Filesize
19KB

MD5
9301101d7db9a4721d6a820acbeaf397

SHA1
ba18009d5a8942419831eb364c36bcec7c9c58a6

SHA256
b3fc1c83885ec14e7dc2b397b894a22637279c11c0ee896978d50d1dc0e3d6d2

SHA512
a961d0f5b553ba91b509c692a2596b33fd7c440269bbfcb8cd89778b3a407beaeea7103e7935f0aab00f405a25be579ba45b059979f5e0c0578c01c0cbb591b0

Download Submit
C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui

Filesize
18KB

MD5
9b9b5521f52a1882157f54b54553d2af

SHA1
28813487bb109b122e01fca6bf2a06806506d48b

SHA256
eeaf85603a0db9309a2b664f760178d4eec162c4c7ffdad00dbb59fb3867445d

SHA512
70a279e7c46d1b266170d33c143a57679929e195dc69be988ea427bda46115d8c83b4f4fc05cc88e960e2505c8c780ce901235987bd8d126e22dfd693bb0354a

Download Submit
C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
11KB

MD5
f8d4861581368f3d9d8dcd37067c4943

SHA1
742af0b94ce4e63d2813f44b58456528202ab958

SHA256
883951312ec775f8c92180750e3ae93df2377d5c8b9cef1591481b33d8abcb39

SHA512
529c2ca59d365a40d465eb4fff9610332c112619e8c9dc97252ca25b18d6c4005a83cb4197250a091ee89d418ae260603fa7ee6293dfb96900b3340b50774251

Download Submit
C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui

Filesize
17KB

MD5
dfbcbecdbe4284d80a9adfa7b2ed65de

SHA1
db6e6f5830369ab51f11e49a7b3fb8468aa1460f

SHA256
cd188593d245af027050c4df1937086c006fb52e0ff5418729819e384ef04902

SHA512
1189ae667dfdf34d0cbb47ad99e0196a351dee940a1dffab26b464b8023a6d591508f7f9b300a71f25217f413ec6ef76fce8b6317b3423cd53aaf09b51e29e51

Download Submit
C:\ProgramData\2D84.tmp

Filesize
14KB

MD5
294e9f64cb1642dd89229fff0592856b

SHA1
97b148c27f3da29ba7b18d6aee8a0db9102f47c9

SHA256
917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2

SHA512
b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf

Download Submit
C:\RCl10Ol9q.README.txt

Filesize
1KB

MD5
6c20c5b93268232ba3bcb18e6dd215af

SHA1
2008645dde0884ad7bed5732a4005968472e7ca2

SHA256
ce7e57b1ee943eeb6ec10d4556da9b16f2cb02401109d60590bb8f78ddbde478

SHA512
4a2465070eff7a0e3d99fe137634f2a7768f5df383f4b10fb00f214c40f4843e0712c117c1b0e422ce7650d3ae04e5d1b4993b7029f3007a52fb68e408a1346c

Download Submit
C:\Users\Admin\AppData\Local\Temp\CCCCCCC

Filesize
146KB

MD5
85332110dfbfcb6503726aad3b3624f9

SHA1
7b98b7cd6bdb822501f89430c459ed530d5a1f34

SHA256
0991a3471d93cfc7da6ea47eb8f4fbdf43d88bbd390067511a8fc71caadb8aaa

SHA512
dee25ea7f6c9b39eae47cc47832c902aeebe04aeb420698f44f14bb6d615586a34a2dc388e1fb237ab455cba82785ca8fbfc7499a2b7df57b2c22edb6a79a71f

Download Submit
F:\$RECYCLE.BIN\S-1-5-21-2718105630-359604950-2820636825-1000\DDDDDDDDDDD

Filesize
129B

MD5
42e7c34073de090cfa2da4d6d490461f

SHA1
9f3677abf0738bb7ff032a4fdc4fe1aa98f920aa

SHA256
bdcdf98f25998ced8c3db0fbfa7032d28aecbc5e404ae2a3913498269f74b60f

SHA512
57504e3ad38ab99c0f8e635a6769eb71e4ba8dae6583f0140ea703548e78374b31ba98e7fdf61bbcdc93c483d3878d6f148157ec06f52a714a180a4f833e427b

Download Submit
memory/2292-0-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download
memory/2292-6821-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download
memory/2292-6822-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download
memory/2292-6823-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download
memory/2292-1-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download
memory/2292-2-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Filesize
64KB

Download